trigger github action only when new tags on master branch

In this question Trigger Github Action only on new tags?

I can trigger the build on new tag.

name: CI
on:
  push:
    tags:
      - 'v[0-9]+.[0-9]+.[0-9]+'

But if I'd like to add another condition, that only the tag on master branch. what should I do?

Or do I have to add if condition in jobs?

ame: CI
on:
  push:
    tags:
      - 'v[0-9]+.[0-9]+.[0-9]+'

jobs:
  deploy:
    runs-on: ubuntu-latest
    needs: test
    if: github.ref == 'refs/heads/master'
    steps: